CVE Feed

    Dashboard / CVE / CVE-2008-0694

    CVE-2008-0694

    Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

    Published:Feb 12, 2008
    Last Modified:Apr 23, 2026
    EPS:Feb 12, 2008
    EPSS Score:0.00256
    CVSS Score:4.3

    Affected Products

    Vendor
    Ibm
    Product
    Os 400

    Exploits

    No exploit reference

    Related CVEs

    CVE-2008-2709 (CVSS 4.7) — Buffer overflow in the BrSmRcvAndCheck function in the RCHMGR module on IBM OS/400 V5R4M0, V5R4M5, and V6R1M0 …
    CVE-2007-3537 (CVSS 7.8) — IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which…
    CVE-2007-1916 (CVSS 10) — Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remo…
    CVE-2007-1918 (CVSS 5) — The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an op…
    CVE-2007-1917 (CVSS 10) — Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 al…
    CVE-2007-1913 (CVSS 5) — The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attack…
    CVE-2007-1915 (CVSS 7.5) — Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows …
    CVE-2007-0442 (CVSS 5) — Unspecified vulnerability in IBM OS/400 R530 and R535 has unknown impact and remote attack vectors, related to…
    CVE-2006-6836 (CVSS 10) — Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vecto…
    CVE-2005-1182 (CVSS 5) — Unknown vulnerability in Incoming Remote Command (iSeries Access for Windows Remote Command service) in IBM OS…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High